Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

Sign in or unlock VAULT-ASSOCIATE-002 to reveal the answer and full explanation for question #81. The question stem and answer options stay visible for context.

Submitted by kavita_s· Apr 18, 2026Understand Vault Concepts

Question

Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

Options

APKI
BKey/Value secrets engine version 2, with TTL defined
CCloud KMS
DTransit

Unlock VAULT-ASSOCIATE-002 to see the answer

You've previewed enough free VAULT-ASSOCIATE-002 questions. Unlock VAULT-ASSOCIATE-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Unlock VAULT-ASSOCIATE-002 - $49.99 / 30 days Sign in

Topics

#PKI Secrets Engine#X.509 Certificates#Short-lived Certificates#Secrets Engines

Full VAULT-ASSOCIATE-002 Practice